Add enterprise policy to exempt hosts from Certificate Transparency

chrome/browser/policy/configuration_policy_handler_list_factory.cc

Index: chrome/browser/policy/configuration_policy_handler_list_factory.cc
diff --git a/chrome/browser/policy/configuration_policy_handler_list_factory.cc b/chrome/browser/policy/configuration_policy_handler_list_factory.cc
index 61753dabf1609c447642a1212b5e9ba1f08a1012..634c10a79c3ae307c0106036d6d11bde99bdbec1 100644
--- a/chrome/browser/policy/configuration_policy_handler_list_factory.cc
+++ b/chrome/browser/policy/configuration_policy_handler_list_factory.cc
@@ -26,6 +26,7 @@
 #include "chrome/common/features.h"
 #include "chrome/common/pref_names.h"
 #include "components/bookmarks/common/bookmark_pref_names.h"
+#include "components/certificate_transparency/pref_names.h"
 #include "components/content_settings/core/common/pref_names.h"
 #include "components/metrics/metrics_pref_names.h"
 #include "components/password_manager/core/common/password_manager_pref_names.h"
@@ -662,6 +663,12 @@ std::unique_ptr<ConfigurationPolicyHandlerList> BuildHandlerList(
   handlers->AddHandler(base::WrapUnique(new ProxyPolicyHandler()));
   handlers->AddHandler(base::WrapUnique(new URLBlacklistPolicyHandler()));
 
+  handlers->AddHandler(base::WrapUnique(new SimpleSchemaValidatingPolicyHandler(
+      key::kCertificateTransparencyEnforcementDisabledForUrls,
+      certificate_transparency::prefs::kCTExcludedHosts, chrome_schema,
+      SCHEMA_STRICT, SimpleSchemaValidatingPolicyHandler::RECOMMENDED_ALLOWED,
+      SimpleSchemaValidatingPolicyHandler::MANDATORY_ALLOWED)));
+
 #if BUILDFLAG(ANDROID_JAVA_UI)
   handlers->AddHandler(
       base::WrapUnique(new ContextualSearchPolicyHandlerAndroid()));